[Setup] This should be an easy one (but not for me)!

wiedhas72 nickghall at gmail.com
Mon Jun 30 22:46:21 UTC 2014


UseCanonicalName On

    ServerAlias test.net
    ServerSignature On

    Header set X-Frame-Options "SAMEORIGIN"
    Header set Strict-Transport-Security "max-age=15768000;
    Header set X-XSS-Protection "1; mode=block"
    Header set X-Content-Type-Options "nosniff"
    Header set Content-Security-Policy-Report-Only "default-src 'self';
img-src *; style-src 'unsafe-inline'; script-src 'unsafe-inline'

    ProxyVia On

    # prevent your web server from being used as global HTTP proxy
    <LocationMatch "^[^/]">
      Deny from all

    <Proxy *>
        Order deny,allow
        Allow from all

    RewriteEngine on
    RewriteRule ^/(.*)


<VirtualHost *>
    ServerAlias   *
    ServerRoot    /var/www
    ServerSignature On

Thanks for your help eehmke!

View this message in context: http://plone.293351.n2.nabble.com/This-should-be-an-easy-one-but-not-for-me-tp7571841p7571848.html
Sent from the Installation, Setup, Upgrades mailing list archive at Nabble.com.

More information about the Setup mailing list